$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa File: 5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa (raw, json) Hash identifier: Ka0P8IvquDECM3xviCnrJBy0zKp2SXKivoRA4x/xpdk= Subject key identifier: 61:A7:64:CC:32:38:2A:34:CC:70:AD:FC:D7:FF:4A:8F:F7:0D:F9:83 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926EBC7A79FF8E7F035B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6e:bc:7a:79:ff:8e:7f:03:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=093b0e29-ec40-4197-9cc0-7d8c5efada09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:98:4c:c2:ad:7a:23:42:77:25:05:79:92:13: f5:09:a8:c2:15:ae:ea:8f:42:63:ff:06:89:1e:0a: 6f:05:93:f6:32:4c:e8:bf:75:d8:e9:f8:97:5e:98: 4d:4d:cd:91:96:74:2e:b6:59:45:23:00:d1:47:c1: a1:52:c4:ad:e2:6f:4c:c8:4f:ad:ec:63:e0:75:d1: 7f:cf:a4:9b:78:7e:71:a0:52:7f:c1:74:42:e1:52: 9c:cb:aa:2a:d0:d5:e6:9e:9f:94:e0:c8:5c:08:5f: 3f:77:e9:cd:ae:c8:ea:f1:73:29:76:c0:4c:9e:9b: ba:ca:b2:65:62:f2:c9:41:9c:e3:16:36:d2:73:d1: 74:a2:eb:f0:8e:53:50:ce:79:61:32:eb:7c:6e:78: a8:86:ac:d8:21:c3:59:31:08:a4:69:46:69:f5:b2: d8:c3:b4:73:a3:99:86:4c:13:34:d3:13:65:53:73: ec:5b:5f:f3:f5:f5:5d:55:d1:33:03:02:1e:77:36: 2f:38:2e:bb:f3:78:94:6b:81:1b:29:73:af:14:25: 95:c9:dc:9d:24:63:98:5b:40:aa:18:7a:39:5e:8c: f9:2e:92:61:bf:30:eb:98:04:14:e7:7e:9c:ef:b2: df:d9:a7:17:3e:2e:0c:19:ca:61:67:df:00:63:6d: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A7:64:CC:32:38:2A:34:CC:70:AD:FC:D7:FF:4A:8F:F7:0D:F9:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a931268-42a2-37de-83f2-7c24bc4eaa9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:52:7f:07:54:73:95:b9:76:93:81:10:3c:30:5f:7c:5f:15: ac:24:ea:f0:56:ae:aa:6f:3b:52:02:d9:ce:94:3f:da:3f:1c: 6c:c4:be:d2:fa:6a:b1:5e:af:7d:35:d9:c1:8b:b5:a9:d5:6e: 53:4b:07:d6:2e:c9:c3:f5:eb:7e:7b:a5:e0:6a:d4:96:d0:9a: 33:9f:81:aa:ef:ba:34:73:44:b6:bc:45:cd:42:04:d7:c4:24: f6:10:e9:00:8d:9d:b3:a7:fb:56:cb:8a:b4:d4:8b:b3:cf:19: 0f:81:38:26:dc:01:0d:f3:03:4a:09:08:f9:91:88:ee:88:0b: 67:bd:5e:e5:2f:5b:09:8a:3f:8d:6a:ab:7d:68:75:90:af:13: 53:fa:42:83:12:54:56:92:78:ca:b9:e8:c8:27:3d:b7:22:68: 87:92:8f:ec:23:f7:3a:dc:36:15:a3:41:15:d7:1a:f2:89:33: 4f:62:80:fd:12:f0:1e:5d:64:97:22:a8:99:75:ed:38:7e:f3: aa:c7:50:99:3b:16:53:cb:53:c6:67:22:b6:5c:42:28:f6:18: 84:bc:09:b7:b1:79:7e:c7:8a:f2:71:b8:56:f3:a6:b5:4d:45: 23:0d:7a:a1:7b:bc:d0:79:ce:69:63:7d:61:90:89:67:ce:30: 30:03:2d:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkm68enn/jn8DW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MDkzYjBlMjktZWM0MC00MTk3LTljYzAtN2Q4YzVlZmFkYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJhMwq16I0J3JQV5khP1CajCFa7qj0Jj/waJ HgpvBZP2Mkzov3XY6fiXXphNTc2RlnQutllFIwDRR8GhUsSt4m9MyE+t7GPgddF/ z6SbeH5xoFJ/wXRC4VKcy6oq0NXmnp+U4MhcCF8/d+nNrsjq8XMpdsBMnpu6yrJl YvLJQZzjFjbSc9F0ouvwjlNQznlhMut8bniohqzYIcNZMQikaUZp9bLYw7Rzo5mG TBM00xNlU3PsW1/z9fVdVdEzAwIedzYvOC6783iUa4EbKXOvFCWVydydJGOYW0Cq GHo5Xoz5LpJhvzDrmAQU536c77Lf2acXPi4MGcphZ98AY21pQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGnZMwyOCo0zHCt/Nf/So/3DfmDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWE5MzEyNjgtNDJhMi0z N2RlLTgzZjItN2MyNGJjNGVhYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEebMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVSfwdUc5W5dpOBEDwwX3xfFawk6vBWrqpvO1IC2c6UP9o/HGzEvtL6 arFer3012cGLtanVblNLB9YuycP16357peBq1JbQmjOfgarvujRzRLa8Rc1CBNfE JPYQ6QCNnbOn+1bLirTUi7PPGQ+BOCbcAQ3zA0oJCPmRiO6IC2e9XuUvWwmKP41q q31odZCvE1P6QoMSVFaSeMq56MgnPbciaIeSj+wj9zrcNhWjQRXXGvKJM09igP0S 8B5dZJciqJl17Th+86rHUJk7FlPLU8ZnIrZcQij2GIS8CbexeX7HivJxuFbzprVN RSMNeqF7vNB5zmljfWGQiWfOMDADLTc= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:39 2025 by rpki-client